Oracle Cloud Infrastructure Documentation

Log Analytics Service Operation Preferences

You can use Oracle Log Analytics REST API to select preferences for specific areas or set of resources in the service.

To be able to set the preferences:

  • Select users (or a group of users) to enable them to view, update, and delete the preferences.

  • Select the preference group for which you want to provide access.

To enable users to update the preferences have fine-grained access over preferences of specific areas or set of resources using IAM policies, see Allow Users to Manage Group Preferences in Log Analytics.

For the currently supported preference groups in Oracle Log Analytics, see Preference Groups in Log Analytics.

For REST API to manage preferences in Oracle Log Analytics, see Log Analytics API Reference.

Allow Users to Manage Group Preferences in Log Analytics

The following permissions currently govern the management of tenant preferences in Oracle Log Analytics:

  • LOG_ANALYTICS_PREFERENCE_READ
  • LOG_ANALYTICS_PREFERENCE_UPDATE
  • LOG_ANALYTICS_PREFERENCE_DELETE

An example IAM policy statement that allows the user group Log-Analytics-Admins to operate on all preference groups in Oracle Log Analytics: 

allow group Log-Analytics-Admins to {LOG_ANALYTICS_PREFERENCE_READ, LOG_ANALYTICS_PREFERENCE_UPDATE, LOG_ANALYTICS_PREFERENCE_DELETE} in tenancy

However, if you want to selectively authorize the user groups to update the preferences for specific preference groups, then use the where clause in the above policy statement and provide the preference group name for the parameter target.preferences.groups.

For example, consider the requirement where you want the user group groupA to be able to:

  • View all preferences in Oracle Log Analytics
  • Update and delete the preferences in the preference group entityLifecycle

Then the IAM policy statements can be:

allow group groupA to {LOG_ANALYTICS_PREFERENCE_READ} in tenancy
allow group groupA to {LOG_ANALYTICS_PREFERENCE_UPDATE, LOG_ANALYTICS_PREFERENCE_DELETE} in tenancy  where target.preferences.groups = 'entityLifecycle'

For the currently supported preference groups, see Preference Groups in Log Analytics.

Preference Groups in Log Analytics

The following preference groups are currently available in Oracle Log Analytics:

Preference Name target.preferences.groups Value Individual Preferences Covered in the Group Description
Entity Lifecycle Properties entityLifecycle AUTO_CREATE_AGENT_HOST_ENTITY, AUTO_DELETE_AGENT_ENTITY, AUTO_DELETE_HOST_ENTITY, AUTO_DELETE_SCH_ENTITIES_OF_TYPES, USE_CUSTOM_HOSTNAME_FROM_TAG, USE_CUSTOM_HOSTNAME_POSITION Tenancy wide preferences for Oracle Log Analytics entities. See Manage Entity Preferences.